From ada482c0e39fe56133acdea094147ccc198c3fd2 Mon Sep 17 00:00:00 2001 From: Chris C <6218225+sigkillchris@users.noreply.github.com> Date: Fri, 28 May 2021 14:46:19 -0500 Subject: [PATCH] Update detect-MHR.zeek Update Virustotal URL to current option match_sub_url = "https://www.virustotal.com/gui/search/%s"; --- scripts/policy/frameworks/files/detect-MHR.zeek | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/policy/frameworks/files/detect-MHR.zeek b/scripts/policy/frameworks/files/detect-MHR.zeek index 6999ab2aee..0c95dadec4 100644 --- a/scripts/policy/frameworks/files/detect-MHR.zeek +++ b/scripts/policy/frameworks/files/detect-MHR.zeek @@ -26,7 +26,7 @@ export { ## The Match notice has a sub message with a URL where you can get more ## information about the file. The %s will be replaced with the SHA-1 ## hash of the file. - option match_sub_url = "https://www.virustotal.com/en/search/?query=%s"; + option match_sub_url = "https://www.virustotal.com/gui/search/%s"; ## The malware hash registry runs each malware sample through several ## A/V engines. Team Cymru returns a percentage to indicate how